CVE-2021-36787: XSS
Published Aug 13, 2021
·Updated
The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.
Affected Software
2 affected components
In2code Femanager Typo3<5.5.1
In2code Femanager Typo3>=6.0.0<6.3.1
Remediation
Patch Available
Event History
Aug 13, 2021
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-36787?
CVE-2021-36787 is classified as a high severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2021-36787?
To fix CVE-2021-36787, upgrade the femanager extension to version 5.5.1 or later for TYPO3 5.x, or to version 6.3.1 or later for TYPO3 6.x.
3
Which versions of femanager are affected by CVE-2021-36787?
CVE-2021-36787 affects femanager versions prior to 5.5.1 and from 6.0.0 up to but not including 6.3.1.
4
What type of attack does CVE-2021-36787 enable?
CVE-2021-36787 enables an attacker to execute arbitrary JavaScript in the context of a user's session through cross-site scripting (XSS).
5
Is CVE-2021-36787 specific to TYPO3?
Yes, CVE-2021-36787 is a vulnerability specifically in the femanager extension used with TYPO3.